Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: gnuvy5lXj5t5r5uffPQWa5yCUOw38rk+Ds/uJEcR3hc=
Subject key identifier: 3A:EC:E1:D6:B8:7D:6B:9E:E9:F4:C9:33:33:7E:C3:EE:BE:06:12:F2
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 01988E7DC50DCFB911742509391553C1FEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 11:01:03 +0000
Manifest this update: Sat 09 Aug 2025 11:01:03 +0000
Manifest next update: Sun 10 Aug 2025 11:01:03 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: oR/UbRjKfUFPOdMVVDWw6ZGJ5eGaOOfhvKAKKY8/5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:c5:0d:cf:b9:11:74:25:09:39:15:53:c1:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Aug 9 11:01:03 2025 GMT
Not After : Aug 10 11:01:03 2025 GMT
Subject: CN=3aece1d6b87d6b9ee9f4c933337ec3eebe0612f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:15:7d:fe:c7:37:12:e4:6b:c7:e0:6c:53:
04:0b:90:79:86:d0:ba:57:96:34:13:c9:d7:47:e2:
9b:da:d3:42:37:25:6d:20:96:48:0d:fb:37:bb:23:
91:47:7f:68:4b:05:63:b7:8d:b7:2c:fe:fe:a2:40:
d6:a9:fd:9f:90:b0:f9:cd:f8:02:b9:f5:17:f1:0d:
29:a9:e1:ac:36:4d:b8:74:31:77:4f:f3:2c:37:7e:
92:29:cb:28:b2:86:04:68:54:c9:f2:5b:eb:53:e7:
e8:66:05:15:c8:96:b0:35:79:4c:e7:e6:46:0c:53:
25:fa:f3:1a:cc:40:01:5a:61:d2:9f:2d:b4:fa:71:
ce:eb:97:7d:3d:65:ab:7e:01:63:df:16:27:f5:31:
de:f3:90:1c:9f:b4:a7:d0:32:5a:a2:a3:ba:71:f3:
fb:f0:3f:f9:3e:c3:e4:fa:c1:cc:0e:f7:a1:d4:fc:
3a:74:09:70:6f:46:2d:1f:ea:4f:65:84:1f:ba:72:
06:7e:11:9b:8e:f8:c6:a8:8f:11:43:1d:84:fa:72:
99:a0:2b:6b:53:00:ca:9e:3a:dc:29:1e:91:25:49:
e9:6f:e5:0c:d4:84:9c:a6:91:7f:f3:28:35:94:41:
9f:20:2f:f9:9b:bd:4b:53:a7:a1:01:61:62:97:8e:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:E1:D6:B8:7D:6B:9E:E9:F4:C9:33:33:7E:C3:EE:BE:06:12:F2
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:20:2e:cd:b3:9b:ed:25:c9:2d:5b:ad:3d:5c:f0:d5:22:86:
08:59:39:95:bc:a9:46:a9:a4:5a:fa:3b:d4:1c:6a:e3:79:b5:
17:e0:f5:da:71:57:3b:00:63:62:0d:52:04:75:06:2c:de:4c:
65:b8:1c:f4:ba:e6:9c:12:5d:77:47:0e:4f:7f:74:8a:c3:30:
53:1f:83:40:c8:0e:82:40:cf:0c:b4:65:25:24:ea:18:28:e2:
f7:53:ed:cf:a0:41:d1:ba:a7:61:19:2d:ad:70:48:16:ef:f2:
66:aa:34:66:db:4a:d9:d6:5f:d7:96:bd:5f:3d:b4:14:0d:f9:
cb:bd:72:31:c5:c0:b8:03:47:5b:f5:0a:f9:3a:42:32:e8:23:
7c:a9:b1:20:7d:fa:62:1a:80:a8:4f:83:d8:0d:bb:a2:fd:f0:
9c:01:37:43:4c:24:a4:08:cb:76:e8:19:4c:16:38:e9:da:c3:
13:b0:63:1d:41:9a:57:c6:ac:f7:c0:29:03:a6:57:04:50:54:
33:7b:1e:da:6e:2b:0b:48:e9:30:0e:a2:d6:4c:30:c8:8f:e1:
17:84:ac:09:1f:36:83:8e:24:bf:b6:6c:e5:3c:de:cf:81:bc:
0b:50:d9:1d:2a:53:57:9c:e4:4c:da:4c:7f:5e:e0:d0:24:b7:
6a:d6:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:26 2025 by rpki-client